Archived copy of warcraft-source.com, the Warcraft: Source (WCS) forum (2007–2011), rebuilt from the Internet Archive by wc3mods.net. This page was captured on 2009-02-22 (original capture). Home · Forum · All archived topics · Downloads
Warcraft-Source.com - WCS mod for CSS
February 22, 2009, 10:31:29 PM *
Welcome, Guest. Please login or register.
Login with username, password and session length
News: Hall of Fame - Designer
Must Visit it
Google  
  Home   Forum   Help Search Login Register   *
Warcraft-Source.com - WCS mod for CSS > Forum > Warcraft:Source > Bug Reports > WCS has been compromised...
Pages: [1]   Go Down
« previous next »
  Print  
Author Topic: WCS has been compromised...  (Read 120 times)
adamscybot
Level 0 Beginner

Offline Offline

United Kingdom

Posts: 1
« on: January 24, 2009, 02:11:04 PM »
Hi,

Im a game server providor and have recieved numerous reports of hacking on some servers. These people are easily gainging access to RCON and modifying their levels. It doesn't matter how many times you change the rcon, they will get it.

sv_cheats etc is off.

This all of a sudden seems to be a known exploit, as numerous steam ID's have sucessfully executed the exploit (whatever it is).

This needs to be solved.
Logged
WCA | Berettonawak [FR]
Watchdogs
Level 7 Expert
*****
Offline Offline

France France

Posts: 1621


Big Berettonawak is watching you...



Bifkids

myServer 81.93.251.44:27015
(Warning: click connects through Steam)
« Reply #1 on: January 24, 2009, 02:33:10 PM »
There's no such bug in WCS...
we have had many reports about servers getting hacked, but that is not true...
check the code by yourself!
There's no line like "rcon_password omfgroxxor" or "ma_client...", etc..
The only way a wcs server could get haxxored is if the owner puts noob races (which could give rcon access to the user).
We are not responsible of the noobness of the servers' owners. And if they aren't happy, we still can teach them how to check if there are bugs/exploits in a race.
Logged

MY INTERNET:
WCA | Pietro [DK]
Level 7 Expert
*****
Offline Offline

Denmark Denmark

Posts: 320




Pietro_Annuzzi
« Reply #2 on: January 24, 2009, 06:27:23 PM »
Quote from: adamscybot on January 24, 2009, 02:11:04 PM
Hi,

Im a game server providor and have recieved numerous reports of hacking on some servers. These people are easily gainging access to RCON and modifying their levels. It doesn't matter how many times you change the rcon, they will get it.

sv_cheats etc is off.

This all of a sudden seems to be a known exploit, as numerous steam ID's have sucessfully executed the exploit (whatever it is).

This needs to be solved.

why would u think its a wcs exploit ?
« Last Edit: January 24, 2009, 06:32:04 PM by Pietro » Logged
WCA | Maxxi [NL]
Level 7 Expert
*****
Online Online

Netherlands Netherlands

Posts: 891



WWW
16maxpayne16

myServer 81.26.221.156:27015
(Warning: click connects through Steam)
« Reply #3 on: January 24, 2009, 07:29:12 PM »
there is a rcon locker on addons.eventscripts.com/addons use that and they cannot change the rcon even though it is sv_cheats 1
Logged
Server = work in progress Smiley
DaBlob
Level 0 Beginner

Offline Offline

United States United States

Posts: 6
« Reply #4 on: February 20, 2009, 06:20:30 AM »
 sry... wrong board
Logged
WCA | Maxxi [NL]
Level 7 Expert
*****
Online Online

Netherlands Netherlands

Posts: 891



WWW
16maxpayne16

myServer 81.26.221.156:27015
(Warning: click connects through Steam)
« Reply #5 on: February 20, 2009, 08:48:22 AM »
Quote from: DaBlob on February 20, 2009, 06:20:30 AM
sry... wrong board

you can remove your post Tongue
Logged
Server = work in progress Smiley
Pages: [1]   Go Up
  Print  
« previous next »
 
Jump to:  

ShoutBox!
Last 7 Shouts:
WCA | Maxxi [NL]
Today at 10:20:49 PM
i am not an admin please do not confuse us wca members ffs >.>
banak
Today at 09:15:27 PM
You are admin. That you're no adult is no excuse.
WCA | Maxxi [NL]
Today at 08:48:12 PM
im not an adult yet so i can behave like this Wink
[Oddity]TeacherCreature
Today at 08:39:52 PM
Well sir for the record you are the adult who is not letting this go.
WCA | Maxxi [NL]
Today at 08:37:44 PM
untill u apolagise or stop acting like your innocent no
[Oddity]TeacherCreature
Today at 08:35:43 PM
Still insulting me, anyway NOW are we done?
WCA | Maxxi [NL]
Today at 08:35:16 PM
you sure look like a child perhaps no sleep makes u like that >.>
Show last 50
Recent
How do u add a skin to a ...
by dallimba
[Today at 10:25:24 PM]
Hall of Fame Server´s
by [Oddity]TeacherCreature
[Today at 10:19:11 PM]
First race, Altair
by Johnsen
[Today at 09:55:31 PM]
Trying to make Trickster ...
by generaldiscomfrt
[Today at 08:52:54 PM]
WCS SERVERS BLACKLIST REM...
by [Oddity]TeacherCreature
[Today at 08:38:40 PM]
Stinkyfax's Server With W...
by tintinibar
[Today at 08:09:13 PM]
my 3:rd race (new on this...
by Master Mind
[Today at 08:04:13 PM]
World of Warcraft Mod rel...
by Penguinarmy357
[Today at 07:50:18 PM]
Shopmenu "bag uses slot.....
by nexitem
[Today at 06:00:19 PM]
Here u can Download my Co...
by ۞۩ WCA|ŠΛΜųŘΛΐ ۩۞
[Today at 05:32:34 PM]
Theme switch

Powered by MySQL Powered by PHP Powered by SMF 1.1.4 | SMF © 2006-2007, Simple Machines LLC
TinyPortal v0.9.8 © Bloc 		Valid XHTML 1.0! Valid CSS!
Page created in 0.045 seconds with 25 queries.